1 . (Previously Presented) A machine-implemented method for selecting a workflow, said 
method comprising the steps of: 

a computer constructing a set of possible workflows meeting a workflow specification 
having a predetermined input and a required output, using components having defined inputs and 
outputs; 

said computer calculating an exposure cost measure for each of the possible workflows in 
the set of possible workflows, said exposure cost measure being based upon, in part, details of 
critical information that is temporarily stored between processing steps within each of said 
possible workflows; and 

said computer selecting a target workflow from the constructed set of possible workflows 
for which the exposure cost measure is calculated to be a minimum. 

2. (Previously Presented) The method as claimed in claim 1, further comprising the step of 
said computer storing a library of components from which possible workflows can be 
constructed. 

3. (Previously Presented) The method as claimed in claim 1, further comprising the step of 
said computer defining said exposure cost measure to be representative of an amount of 
information that a constructed workflow exposes. 
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4. (Previously Presented) The method as claimed in claim 1, further comprising the step of 
said computer defining said exposure cost measure to be representative of a duration for which a 
constructed workflow exposes information. 

5. (Previously Presented) The method as claimed in claim 1, further comprising the step of 
said computer defining said exposure cost measure to be representative of an amount of 
information that a constructed workflow exposes, and a duration for which information is 
exposed. 

6. (Previously Presented) A computer system for selecting a workflow comprising computer 
software recorded on a computer-readable medium, said software comprising instructions 
executable by said computer system, said instructions causing said computer system to: 

construct a set of possible workflows meeting a workflow specification having a 
predetermined input and a required output, using components having defined inputs and outputs; 

calculate an exposure cost measure for each of the possible workflows in the set of 
possible workflows, said exposure cost measure being based upon, in part, details of critical 
information that is temporarily stored between processing steps within each of said possible 
workflows; and 

select a target workflow from the constructed set of possible workflows for which the 
predetermined exposure cost measure is calculated to be a minimum. 
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7. (Previously Presented) A computer program product for selecting a workflow comprising 
computer software recorded on a computer-readable medium for performing the steps of: 

constructing a set of possible workflows meeting a workflow specification having a 
predetermined input and a required output, using components having defined inputs and outputs; 

calculating an exposure cost measure for each of the possible workflows in the set of 
possible workflows, said exposure cost measure being based upon, in part, details of critical 
information that is temporarily stored between processing steps within each of said possible 
workflows; and 

selecting a target workflow from the constructed set of possible workflows for which the 
exposure cost measure is calculated to be a minimum. 

8. (Previously Presented) The computer system in claim 6, said instructions causing said 
computer system to store a library of components from which possible workflows can be 
constructed. 

9. (Previously Presented) The computer system in claim 6, said instructions causing said 
computer system to define said exposure cost measure to be representative of an amount of 
information that a constructed workflow exposes. 
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10. (Previously Presented) The computer system in claim 6, said instructions causing said 
computer system to define said exposure cost measure to be representative of a duration for 
which a constructed workflow exposes information. 

11. (Previously Presented) The computer system in claim 6, said instructions causing said 
computer system to define said exposure cost measure to be representative of an amount of 
information that a constructed workflow exposes, and a duration for which information is 
exposed. 

12. (Previously Presented) The computer program product in claim 7, further comprising the 
step of storing a library of components from which possible workflows can be constructed. 

13. (Previously Presented) The computer program product in claim 7, further comprising the 
step of defining said exposure cost measure to be representative of an amount of information that 
a constructed workflow exposes. 

14. (Previously Presented) The computer program product in claim 7, further comprising the 
step of defining said exposure cost measure to be representative of a duration for which a 
constructed workflow exposes information. 
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15. (Previously Presented) The computer program product in claim 7, further comprising the 
step of defining said exposure cost measure to be representative of an amount of information that 
a constructed workflow exposes, and a duration for which information is exposed. 
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